BLACKOUT MAP

SysAid: exploited vulnerabilities

AddedVulnerabilityProductSeverityAttack chance
Jul 22, 2025On-Prem Improper Restriction of XML External Entity ReferenceCVE-2025-2776SysAid On-PremCritical 9.365%
Jul 22, 2025On-Prem Improper Restriction of XML External Entity ReferenceCVE-2025-2775SysAid On-PremCritical 9.343%
Nov 13, 2023Server Path TraversalCVE-2023-47246used by ransomwareSysAid ServerCritical 9.899%

Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.